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10 NOV 4977 


INFORMATION SYSTEMS SECURITY GROUP 
MONTHLY HIGHLIGHTS 


October 1977 


SPECIAL ACTIVITIES: 


1. ADP Risk Assessment 


The ADP Risk Assessment of the Agency's 
computer systems continued and progressed in a 
very satisfactory manner. To date, approximately 
forty interviews have been conducted with many 
beneficial comments being received by the user 
population. 


2. TSCADS (Top Secret Control Automated Data System) 


During the month of October, seven Top Secret 
STATINTL Control inventories were initiated within three of 
the Agencies Directorates for a combined total of 

twenty-three in progress. 
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2, Internal Working Group 


The ODP/OS Joint Working Group on Computer 
Security met on 26 October 1977. The major items 
discussed were (a) RACF (Resource Access Control 
Facility) and its impact on the Agency; (b) GC-03 
point reconfiguration and the Security requirements 
associated with the output. 


TRAINING: 


1. On 18 and 21 October 1977, the Information 
Systems Security staff were afforded a briefing 
on RACF (Resource Access Control Facility) at IBM 
in Gaithersburg, Maryland. 


2. Four members of Information Systems Security 
Group attended the Computer Auditing and Security 
course held at the University of Maryland 6 and 7 
October 1977. 


3. On 27 October 1977, one representative of 
Information Systems Security Group addressed the 


new Agent's class and provided atour of the GC-03 
STATINTL Center. 


GENERAL: 


3. Terminal Installations: 


The Technical Support 3ranch, ISSG approved 7 
requests for the installation and/or relocation of 
CRT remote terminals and other peripheral related 
devices. 
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